
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json)
Hash identifier: Qr0a6SvgEvHD3wz6iHaOLBNvlRSghHMlrOqqTk0FLLI=
Subject key identifier: 81:8E:4D:FC:54:3A:CF:CE:65:A4:C8:99:8E:FC:47:6C:BD:A9:73:C4
Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
Certificate serial: 02A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
Manifest number: 02A3
Signing time: Mon 11 May 2026 01:33:58 +0000
Manifest this update: Mon 11 May 2026 01:33:58 +0000
Manifest next update: Mon 18 May 2026 01:33:58 +0000
Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: 2ELoTxQr2gjQNqBVkLjHy5pgPdILIiENiXAp1Y+pN34=)
2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 07Vvv9BLMYQgb5Np9HOURXIhU/+tIYEclR6BOQmk2Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl
rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
Validity
Not Before: May 11 01:33:58 2026 GMT
Not After : May 18 01:33:58 2026 GMT
Subject: CN=6a013206-a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:0f:f8:e0:47:8e:08:c4:2d:0f:08:b4:25:
4d:4f:d6:09:50:ad:d0:56:a6:68:12:37:6b:de:c5:
8e:50:c6:e1:f7:99:8e:71:a4:aa:e2:2e:ca:db:32:
dd:ec:f6:6d:d5:2f:30:f9:01:a0:36:c2:56:d8:c8:
d1:77:87:56:05:d8:bc:93:50:3f:05:41:88:5a:b9:
da:2a:34:8a:ab:98:4a:72:b6:a7:98:22:4a:11:8c:
fe:07:46:55:36:5b:96:9f:95:d1:ab:b7:27:c5:84:
57:18:6f:46:a8:da:1b:7a:db:43:f0:b0:10:e0:31:
21:95:74:f7:57:64:39:c7:14:57:09:6d:7c:cc:bd:
8a:92:8e:63:f2:63:78:26:e5:c5:ae:59:a5:a0:54:
7c:fc:cd:37:cf:c6:9f:75:02:82:5a:cc:cd:2f:79:
f6:03:31:ac:97:00:7a:d2:17:bc:e1:79:bb:98:76:
55:a3:f6:dd:6a:bf:a1:65:b5:4a:ec:de:b2:2b:6e:
b6:3c:a9:6f:3b:8c:f4:33:94:b1:52:12:cc:2c:ee:
f2:d8:b8:95:fe:da:40:c3:09:05:01:c1:b4:80:a9:
db:d1:50:84:d1:27:e8:ca:ea:57:e7:e9:40:78:af:
49:2e:e0:ab:22:25:2f:ac:fb:c4:87:69:f6:00:7f:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8E:4D:FC:54:3A:CF:CE:65:A4:C8:99:8E:FC:47:6C:BD:A9:73:C4
X509v3 Authority Key Identifier:
keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ca:77:55:56:0c:f1:00:6b:68:5e:6f:b1:d6:96:f3:99:4e:
f4:9f:56:17:c7:08:46:a9:77:c0:05:ff:e6:94:28:21:7c:88:
ff:3d:20:34:15:17:00:2c:cd:10:10:f4:a0:52:2d:00:37:da:
88:5c:0f:29:fd:a3:f4:57:f4:a3:57:ce:82:07:a4:78:08:e9:
02:fc:2e:c1:ac:44:bb:1f:1f:f4:0b:5b:df:08:7b:2e:ca:03:
9b:b8:1f:4c:46:92:93:d8:e3:8b:de:50:19:07:49:38:47:ee:
06:88:00:dc:c4:11:6c:af:e0:99:96:dc:39:98:b2:26:f1:b1:
63:23:96:5f:52:d0:73:cb:3f:f1:07:63:61:d1:1f:d9:da:d2:
e2:8b:ea:e9:4c:b5:2e:5e:7f:f6:2b:5f:3d:58:24:07:2e:c1:
d9:e5:a6:cb:9a:e0:85:65:19:3d:7c:d2:84:3b:ec:65:1d:10:
2c:19:5f:50:1c:a8:8d:72:51:f9:c8:1f:e7:b3:cb:e6:b2:46:
80:9f:49:93:8d:e5:b3:75:3f:5a:85:a8:b4:66:b7:e6:2c:5e:
3f:df:08:f7:9f:25:7f:8f:e0:6e:22:62:99:68:24:bd:99:fb:
a1:b2:12:7e:ea:04:59:42:39:82:89:00:37:51:f3:46:ac:25:
40:54:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:16 2026 by rpki-client